Job Description

Due to anticipated growth throughout 2023, Wood is presently inviting Expressions of Interest for OT Security - Specialist for our Abu Dhabi Engineering team. This role is subject to project award which is estimated to be in early 2023.

The Role

The Operational Technology (OT) Security Specialist ensures that security is embedded in each phase of the system design, application development and enhancement in the Operational Technology Domain.

This candidate will act as a Subject Matter Expert for the technology & processes related to OT Cyber Security, will ensure that good security practices are embedded across client's (ADNOC) operating sites, make recommendations for improvement / oversight during design and implementation.

Ensures compliance and implementation of Information Security Policies and Standards by client (ADNOC) together with the industry's leading practices from SANS, NIST and CSC are incorporated when choosing solutions and designing and building applications and provisioning components in OT and Networks

Ensures that applications, systems and infrastructure components are tested to identify vulnerabilities and that such are mitigated and managed prior to "Go Live".

Ensures the synergy of Cyber Security Group with the stakeholders Networks, especially in the area of integration between the Cyber Security and OT Domain.

Responsibility

+ Experience of managing cyber security for large size and complex OT systems.

+ Preparation of OT Security Design Basis

+ Preparation of design specifications and amendment of COMPANY Design General specification

+ Preparation of Security System Architecture for a complex distributed system having multiple distributed third-party system connectivity through Modbus TCP/IP and Interfaces with higher level application server through OPC Protocol

+ Preparation of Network Architecture inclusive of all network accessories and in compliance with latest OT security requirements

+ Preparation of OT Security Scope of work documentation.

+ Apply specific experience to developing processes and implementing robust solutions including Cyber Security, Supervisory Control and Data Acquisition (SCADA), while minimizing integration costs and maximizing flexibility.

+ In-depth knowledge and working experience in Security applications:

+ Antivirus/Device Control and Whitelisting solutions (Mcafee solutions)

+ Network Monitoring System (Whatsup Gold)

+ Acronis (OS Backup application)

+ Active Directory & WSUS (Microsoft solutions)

+ CISCO network applications

+ Nextgen firewalls

+ Tofino firewalls

+ Knowledge of Modbus TCP/IP, OPC & IEC 61850 communication protocols.

+ Finalization of technical queries and Technical Bid Evaluation for the OT security proposal bids from the following ICS OEMs -

+ EMERSON - Delta V

+ Yokogawa - Centum VP

+ Honeywell - C300

+ Siemens - PCS 7

+ Schneider - EVO

+ Finalization of technical queries and Technical Bid Evaluation for the OT security proposal bids from various other third-party system OEMs.

+ Capability to manage multiple vendor co-ordinations that involve ICS OEM and several other third-party system OEMs/Vendors to implement an integrated OT security architecture.

+ Preparation/Approval of engineering deliverables such as cable block diagrams, schedules, inventory lists etc.

+ Approval for Critical Control system Vendor document such as Functional Design Specification - Hardware and Software, Network architecture and data flow diagrams, GA/IAs, switch configurations, domain groups/policies/rules,

+ Provide expert guidance in Factory Acceptance Test for OT security servers and applications.

+ Provide solutions to problems/anomalies in Integrated Factory Acceptance Test for OT Security

+ Approval for Control System Change over Philosophy & Method Statement

+ Technical Risk Assessment for Change over from Existing to New OT Security systems

+ Provide solutions to problems/anomalies detected in Site Acceptance Test for OT Security solutions.

+ Supervision to EPC CONTRACTOR during site execution for any System Changeover works.

+ Review and finalization of site technical queries resolution and approve way forward.

+ Minimum of 10 years control systems security background with relevant previous experience in a technical or consulting environment.

+ Should possess valid OT / IT Security certifications.

+ Experience with ICS systems and ICS security industry practices with exposure to Operational technologies

+ Minimum 5 years with supporting PLC, DCS, SIS, HMI or SCADA systems. Experience supporting and troubleshooting industrial protocols such as OPC, Modbus TCP, HART, Foundation Fieldbus

+ In depth knowledge of Virtualization for the optimization of number of machines.

+ Undertake leading role in conducting security reviews and assessments of clients' operational technology and OT security risk landscapes to advise on enhancements, and develop strategies, roadmaps, and new operating models to help clients achieve these enhancements.

+ Comprehensive working knowledge of one or more of the following: IEC 62443/ISA 99, ISO 27001, NIST SP 800-82, CPNI Good Practice.

+ Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI - DSS, NIST standards on Cyber Security, HITRUST, etc. is a plus.

+ Knowledge on new disruptive technologies such as the Internet of Things (IoT) is preferred.

+ Experience in deploying or supporting security practices and technologies such as

+ IT Networks (switches, routing, firewalls)

+ Risk or vulnerability assessments,

+ Antivirus software,

+ Firewalls,

+ Intrusion detection systems,

+ Centralized alert logging and monitoring in ICS environments (energy companies or large manufacturing organizations)

Wood is a global leader in engineering and consultancy across energy and the built environment, helping to unlock solutions to some of the world's most critical challenges. We provide consulting, projects and operations solutions in more than 60 countries, employing around 40,000 people.

We are an equal opportunity employer that recognises the value of a diverse workforce. All suitably qualified applicants will receive consideration for employment on the basis of objective criteria and without regard to the following (which is a non-exhaustive list): race, colour, age, religion, gender, national origin, disability, sexual orientation, gender identity, protected veteran status, or other characteristics in accordance with the relevant governing laws.

Published Position Title: OT Security - Lead Engineer

Requisition ID:

Name: Fixed Term

External Company Name: Wood Plc

External Company URL: